Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C11E4/13DDD38883AD11EEA0A81B324AD9E6FC/8CO5dwgZb_nyC8kofVbELKrlFA8.mft
File:                     8CO5dwgZb_nyC8kofVbELKrlFA8.mft (raw, json)
Hash identifier:          rQ4K/U8PjYljLwVnloyvyLvpthLUPnbqoVU+KLenjTM=
Subject key identifier:   BD:4E:69:55:38:25:35:DD:9C:29:45:3A:88:74:7A:DD:0C:6F:5F:47
Authority key identifier: F0:23:B9:77:08:19:6F:F9:F2:0B:C9:28:7D:56:C4:2C:AA:E5:14:0F
Certificate issuer:       /CN=F36C11E4AF/serialNumber=F023B97708196FF9F20BC9287D56C42CAAE5140F
Certificate serial:       0287
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/8CO5dwgZb_nyC8kofVbELKrlFA8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C11E4/13DDD38883AD11EEA0A81B324AD9E6FC/8CO5dwgZb_nyC8kofVbELKrlFA8.mft
Manifest number:          0285
Signing time:             Thu 31 Jul 2025 04:15:43 +0000
Manifest this update:     Thu 31 Jul 2025 04:15:43 +0000
Manifest next update:     Sat 02 Aug 2025 04:15:43 +0000
Files and hashes:         1: 8CO5dwgZb_nyC8kofVbELKrlFA8.crl (hash: 5jh9m0RwuAWFKYh8Rzr4MROvPUBXJCCEspNri0yD8us=)
                          2: 6C4F3A8289C711EEBB1136854AD9E6FC.roa (hash: zGkozWQm4jFzQPS/tvB2v8qvuWaHBmsMZztA6yBA/qw=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C11E4/13DDD38883AD11EEA0A81B324AD9E6FC/8CO5dwgZb_nyC8kofVbELKrlFA8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C11E4/13DDD38883AD11EEA0A81B324AD9E6FC/8CO5dwgZb_nyC8kofVbELKrlFA8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/8CO5dwgZb_nyC8kofVbELKrlFA8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 02 Aug 2025 00:08:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 647 (0x287)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C11E4AF, serialNumber=F023B97708196FF9F20BC9287D56C42CAAE5140F
        Validity
            Not Before: Jul 31 04:15:43 2025 GMT
            Not After : Aug  2 04:15:43 2025 GMT
        Subject: CN=688aedef-914b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:5c:52:e5:5b:e0:cc:6c:53:19:79:45:18:5e:
                    13:b9:63:ba:bb:35:b8:85:cc:32:6d:35:47:c2:62:
                    1b:6c:1f:39:22:e2:18:b5:7a:76:19:d1:3f:4d:e9:
                    80:c0:01:a8:a0:4b:81:f6:08:47:f0:65:23:20:0a:
                    a3:83:be:84:48:4a:05:86:85:df:20:13:76:f3:08:
                    77:0c:be:a0:c2:9b:4a:6d:65:ff:58:c6:7c:e8:0a:
                    20:0a:11:b8:5a:2b:82:d2:07:68:cc:8c:3d:e4:99:
                    f8:1d:7d:62:44:6d:58:61:a3:5a:6a:54:34:89:88:
                    75:7f:35:18:2d:bf:ca:d0:43:0a:44:a3:df:48:80:
                    36:41:a3:98:45:3e:61:d9:f9:09:a6:1e:49:68:06:
                    93:d1:6a:26:f4:05:c7:63:7b:92:d2:5e:25:70:f6:
                    31:3f:c9:4b:8f:08:79:eb:94:af:b8:64:26:41:19:
                    4d:30:6a:33:d2:10:b2:96:98:22:d1:8b:1b:9a:c7:
                    c3:97:fa:e6:3f:05:73:68:f5:a1:88:23:a4:9f:fc:
                    81:e9:ee:f8:b9:c0:c6:e2:d2:a4:f4:72:41:bc:b7:
                    dd:64:87:bc:a6:6c:33:fc:65:42:1a:f0:0d:ce:75:
                    9c:a7:ee:e2:a0:db:8e:d0:6e:c0:54:5a:dc:6c:6b:
                    ab:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:4E:69:55:38:25:35:DD:9C:29:45:3A:88:74:7A:DD:0C:6F:5F:47
            X509v3 Authority Key Identifier:
                keyid:F0:23:B9:77:08:19:6F:F9:F2:0B:C9:28:7D:56:C4:2C:AA:E5:14:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C11E4/13DDD38883AD11EEA0A81B324AD9E6FC/8CO5dwgZb_nyC8kofVbELKrlFA8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/8CO5dwgZb_nyC8kofVbELKrlFA8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C11E4/13DDD38883AD11EEA0A81B324AD9E6FC/8CO5dwgZb_nyC8kofVbELKrlFA8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:79:b3:38:95:86:10:45:09:8d:3a:f7:f2:d1:cf:ba:8b:32:
         af:ab:5d:2e:d1:52:91:ca:70:70:f1:a9:e1:e8:c9:4e:f8:76:
         c3:2b:cc:2e:12:6d:d2:c6:1a:30:55:79:79:1d:26:b1:f5:40:
         e3:18:03:65:1e:18:65:da:08:28:60:63:f4:c6:1c:f5:0c:a3:
         da:dd:06:bd:db:22:cb:41:86:e0:75:1c:6d:1f:93:62:ac:ff:
         42:cd:0f:d2:91:d6:25:d6:f7:fa:13:2c:b4:38:5d:ed:e5:a9:
         91:3c:a5:5a:ab:78:9b:df:a1:c8:a8:96:1c:18:a4:05:34:46:
         12:bc:2a:0e:38:7b:ff:03:e7:28:71:a9:5b:9b:43:4e:68:fa:
         6f:86:eb:8c:f2:20:58:0e:1d:57:7a:54:7e:e1:05:f3:7b:2d:
         a0:db:60:b4:87:dd:52:41:01:2d:59:68:32:36:e1:6f:57:ab:
         48:06:6b:ae:94:a7:9f:bc:0a:2e:bb:53:b9:d8:a5:e0:c4:e1:
         38:1f:2e:69:25:93:7b:c1:55:de:96:0c:37:4e:60:b3:da:6e:
         e1:87:82:e9:4c:ab:2c:2e:8e:4a:ba:56:9a:e4:32:23:33:d8:
         69:03:95:1a:ef:c7:ed:03:f5:3d:ac:23:12:7d:58:6e:b7:16:
         5b:5a:38:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 31 11:17:52 2025 by rpki-client